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Cell phones are ubiquitous. As of 2017, there were more cell 
phones than people in the United States. Nearly 70 percent 
of those were smartphones, with 94 percent of millennials 
carrying a smart device. 1 Cell phones go nearly everywhere, 
and users are increasingly dependent on smartphone applica¬ 
tions for daily activities, such as texting, email, and loca¬ 
tion-assisted direction services. 2 

Cellular technology also allows service providers to collect a 
wealth of information about a user’s whereabouts. 3 Cellular 
service providers automatically record the location of cell 
phones at regular intervals, transforming them into personal 
tracking devices. 4 One court described them as the “easi¬ 
est means to gather the most comprehensive data about a 
person’s public — and private — movements.” 5 Cell phone 
location data is collected in such high volume that it offers a 
nearly inexhaustible source of granular information, includ¬ 
ing when and where someone goes, with whom, and even for 
what purpose. 6 

This white paper surveys the landscape of government 
acquisition of location data about cell phone users — from 
cellular providers’ collection of location information to the 
use of technologies that pinpoint where individuals and cell 
phones are located. It describes how cell phones operate, 
how that location information is accrued and disseminated, 
and the technologies that can be used to establish where a 
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phone is, where it has been, and what other users have been 
in proximity. 

The paper then analyzes both the legal and policy landscape: 
how courts have ruled on these issues, how they can be ex¬ 
pected to rule in the future, and how agencies have addressed 
these issues internally, if at all. It adds to concerns that cell 
phone-based monitoring could violate the constitutional 
privacy rights of millions of ordinary Americans — and that 
people of color are disproportionally affected. Finally, it con¬ 
cludes with a set of recommendations to enhance transparen¬ 
cy and accountability around the use of cell phone location 
data and to ensure constitutional protections for users who 
are affected. 

How is cell phone location data collected? 

A cell phone’s location information can be collected in 
several ways. First, a cell phone accesses its network through 
signals transmitted by cell towers. 7 The cell phone searches 
for the strongest signal and continually connects to a cell 
tower as the user moves within the network, whether or not a 
call is underway. 8 When it connects to a cell tower, the phone 
transmits identifying information to the service provider. 9 
This enables the provider to “track the phone, discontinue 
service, or blacklist it from a network.” 10 The density and 
proliferation of cell towers make it increasingly possible to lo¬ 
cate an individual phone to within a few feet of its position. 11 
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Service providers collect and store this location data, called 
cell site location information (CSLI), at least temporar¬ 
ily; some providers keep the data for up to seven years. 12 
Police officers can obtain stored CSLI if they satisfy certain 
legal requirements. Prior to 2018, law enforcement agents 
generally obtained CSLI with a court order under the Stored 
Communications Act, which has a lower standard than a 
warrant. 13 However, the Supreme Court recently held in U.S. 
v. Carpenter (2018) that the police must get a warrant to 
obtain seven days or more of CSLI. 14 Police may also request 
information about every device connected to a single tower 
during a particular interval, potentially netting historical lo¬ 
cation information from thousands of phones; this technique 
is colloquially known as a “cell tower dump.” 15 For instance, 
in 2010, the FBI received over 150,000 numbers in a single 
dump in an effort to determine if a suspect had been near 
several banks that had been robbed. 16 Verizon had more than 
14,000 cell tower dump requests in both 2016 and 2017 and 
is on track for even more in 2018. 17 

In addition, service providers can use the data transmitted 
by cell phones to monitor a phone’s location in real time 
and provide that information to the police, allowing law 
enforcement to track someone’s movements as they happen. 18 
In addition to requesting prospective — that is, real-time — 
CSLI from providers, police can also request that providers 
“ping” phones to force them into revealing their location. 
This technique relies on Enhanced 911 (E911) data, which 
allows law enforcement to pinpoint the location of cell 
phones that have placed 911 calls; a provider can also make 
a reverse 911 call, allowing the police to invisibly track a 
target’s cell phone in real time. 19 Courts are split on whether 
a probable cause warrant is required to obtain real-time cell 
phone location information or if a lower standard is required, 
though a consensus appears to be emerging in favor of a 
warrant requirement. 20 

A number of law enforcement agencies also have technology 
that enables them to circumvent the service provider and 
gain direct access to real-time cell phone location data. 21 
These devices, called cell site simulators, are known collo¬ 
quially as “Stingrays” after a popular model manufactured by 
the Harris Corporation. 22 A cell site simulator “masquerades 
as a cell tower, tricking all nearby cell phones to connect to 
itself” rather than to a legitimate tower. 23 When deployed — 
whether by hand, from within a patrol car, or attached to a 
plane 24 — these simulators gather the real-time geolocation 
of all phones within range. 25 

Cell site simulators can be used in two ways. First, if an offi¬ 
cer already knows the location of a phone down to the radius 
of several blocks or a neighborhood, he or she can drive 
around the area with the simulator to pinpoint the precise 
location. 26 As part of this process, the cell site simulator will 


“also intercept [] the data of other cell phones in the area, 
including the phones of people not being investigated.” 27 
Second, the device can be used to identify all the cell phones 
(and, by extension, their subscriber information) at a given 
location, such as a protest. 28 Cell site simulators are generally 
used in such a way that “ [t] he phone’s user will not know” 
they are being tracked, so law enforcement can use the tool 
for location surveillance without the public’s knowledge. 29 
As of November 2018, the U.S. Departments of Justice, 
Homeland Security, and Treasury owned numerous cell site 
simulators, as did 75 law enforcement agencies in 27 states 
and the District of Columbia. 30 

Smartphone location data can also be obtained through the 
phone’s use of Wi-Fi, Bluetooth, and GPS. Smartphones con¬ 
tinuously send out signals containing identifying information 
to establish connections with these technologies; in the case 
of GPS, smartphones receive signals from GPS satellites and 
perform calculations based on the timing and other features 
of the signals to determine their location — indeed, a phone 
can calculate its GPS location, even with no WiFi or cellular 
connection, because it does not need to broadcast anything 
to receive the GPS signals. 31 Smartphones store their location 
history until the user takes affirmative steps to clear the 
data. 32 Third-party applications running on smartphones can 
also request and receive geolocation data without any direct 
action on the part of the user. 33 Law enforcement can request 
this data directly from these third-party providers like Google 
and Facebook, 34 often with delayed notice to users. 35 

While users can enable privacy settings that are meant to 
limit disclosure of much of their location data, phones can 
bypass these privacy restrictions in various circumstances. 36 
A sufficiently determined individual could even ascertain a 
phone’s location through data produced by built-in features 
that measure the phone’s altitude and speed. 37 In other 
words, short of turning off one’s phone, it is nearly impossi¬ 
ble to prevent the transmission of location data. 

Why does this matter? 

First, cell phone location information reveals a user’s move¬ 
ments with ever-increasing precision, potentially exposing 
intimate details of someone’s life. 38 As the federal appeals 
court for the District of Columbia explained, “ [a] person 
who knows all of another’s travels can deduce whether he is 
a weekly churchgoer, a heavy drinker, a regular at the gym, 
an unfaithful husband, an outpatient receiving medical 
treatment, an associate of particular individuals or political 
groups — and not just one such fact about a person, but 
all such facts.” 39 This information could be used to target a 
political opponent — for instance, an undocumented activist 
— and could chill the exercise of First Amendment-protected 
activities like protests and other gatherings. Even limited lo¬ 
cation data, whether from CSLI or a cell site simulator, may 
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reveal whether a person is inside a home or another private 
space protected by the Fourth Amendment, information that 
has traditionally required a warrant to obtain. 40 

Second, there is significant distrust around law enforce¬ 
ment’s use of cell site simulators. There is now some public 
knowledge about the use and capabilities of these tools. 
However, states and local agencies buying the devices were 
long required to sign restrictive nondisclosure agreements 
with the FBI before purchase, often preventing the disclosure 
of critical information to the courts and defense counsel. 41 
Even now, there are concerns that cell site simulators could at 
some point begin intercepting “user content such as browser 
activity, SMS text messages, and the content of phone 
calls.” 42 This technological capability does not yet appear to 
have been deployed by local or state law enforcement. But 
the government’s tendency to obscure the capabilities and 
use of surveillance technologies hinders oversight, trust, and 
public debate. 

Location surveillance also has a disproportionate impact 
on communities of color. Law enforcement agencies have 
historically focused their power and resources on communi¬ 
ties of color, and this disparity persists today. 43 New technol¬ 
ogies that extend the power and reach of law enforcement 
are likely to exacerbate existing biases in policing and add 
more surveillance to communities that are already extensively 
policed. 44 In 2016, following on a formal complaint from 
civil rights groups to the Federal Communications Commis¬ 
sion, a coalition of senators sent a letter to the FCC raising 
concerns that cell site simulators were more frequently used 
in minority neighborhoods and asking the agency to provide 
additional information. 45 

What does the law say? 

HISTORICAL CELL SITE INFORMATION 

The Fourth Amendment to the U.S. Constitution guaran¬ 
tees the “right of the people to be secure in their persons, 
houses, papers, and effects, against unreasonable searches 
and seizures.” 46 Until the middle of the last century, that 
language was understood to mean that only a physical search 
violated the Constitution and therefore required a warrant. 
Thus, the Supreme Court held in 1928 that the police could 
use any manner of surveillance device as long as they did not 
breach physical barriers — for instance, by literally inserting 
a microphone into the walls of a home. 47 

In 1967, however, the Supreme Court reversed course, 
holding in Katz v. United States that “the Fourth Amend¬ 
ment protects people, not places.” 48 The Court ruled in that 
case that even when a person uses a public phone booth to 
make a call, the act of closing the door to the phone booth 
indicates that the caller meant to keep it private and that the 


police must get a warrant to listen in. 49 Since Katz , when 
a defendant asserts that the government has conducted a 
search under the Fourth Amendment by observing or col¬ 
lecting information about him via some method other than 
a physical intrusion, the court looks to whether he had a 
“reasonable expectation of privacy.” In other words, the court 
considers (1) whether the individual had an “actual (subjec¬ 
tive) expectation of privacy” in the particular information or 
activity that produced it and (2) whether society is “prepared 
to recognize” that expectation as reasonable. 50 

In the decades after Katz , the Court ruled that surrepti¬ 
tiously gathering information about activities inside private 
homes violates Americans’ reasonable expectations of privacy, 
whether by secretly sending in a tracking device like a beeper 
(as in U.S. v. Karo) or by using cutting-edge technological 
tools like thermal imaging (as in Kyllo v. U.S.). 51 On the 
flip side, the Court held in U.S. v. Knotts that a driver on a 
public road could not reasonably expect his movements to be 
private from an officer observing where he drove. 52 Even in 
Knotts , however, the justices observed that “dragnet-type law 
enforcement practices” could change that calculation. 53 And 
in recent years, the Court has begun to more fully embrace 
the maxim that an individual “does not leave his privacy 
behind when he walks out his front door.” 54 

Thus, in United States v. Jones (2012), a majority of justices 
opined that using a GPS tracker to monitor a car’s location 
on a nearly minute-by-minute basis for a month, producing 
over 2,000 pages of data, raised significant privacy concerns 
in light of the duration of the monitoring, the comparatively 
low cost, and the secrecy and intrusiveness of the surveillance 
tool. 55 (The narrowly drawn opinion concluded simply that 
physically attaching the GPS tracker to the car without a 
warrant was an unconstitutional trespass, but twin concur¬ 
rences from Justices Alito and Sotomayor delved into the pri¬ 
vacy concerns. 56 ) Two years later, the Court ruled in Riley v. 
California that police need a warrant to search the cell phone 
of an arrestee. The opinion, which emphasized the vast 
storage capacity of modern-day phones, noted that historical 
cell phone location information — “a standard feature on 
many smart phones” — can “reconstruct someone’s specific 
movements down to the minute, not only around town but 
also within a particular building.” 57 

Taken together, these cases suggest the Court is developing a 
more expansive vision of the Fourth Amendment in the digi¬ 
tal age. If the Court is committed to “assuring preservation of 
that degree of privacy against government that existed when 
the Fourth Amendment was adopted,” 58 it must “contend 
with the seismic shifts in digital technology that [make] pos¬ 
sible the tracking of not only” a single individual’s location 
but everyone’s location. 59 
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It is worth noting that the Supreme Court has not yet 
addressed cell tower dumps. Some lower courts have tackled 
this question, with several allowing the government to access 
cell tower dump data with a court order under 18 U.S.C. § 
2703(d) of the Stored Communications Act. 60 Notably, these 
courts relied in part on the robustness of the third-party 
doctrine, a legal framework that has shifted substantially in 
the wake of Carpenter v. United States. 61 Other decisions have 
required a warrant and obligated prosecutors to purge any 
information not relevant to the investigation. 62 In light of 
Carpenter and the possibility that these collection methods 
rise to the level of the “dragnet” warned of by Knotts , the 
Supreme Court may rethink in the coming years whether a 
warrant is required for collection of this data. 

REAL-TIME CELL PHONE TRACKING 

The Supreme Court has not yet squarely addressed real-time 
cell phone tracking, and it declined to do so in Carpenter v. 
United States , ruling only that a warrant is required to obtain 
more than a week’s worth of CSLI. 63 Lower courts, however, 
have already faced the issue, and a number of courts have 
held that police must get a warrant before requesting or 
obtaining real-time location data. 64 In 2016, for instance, a 
Maryland appeals court ruled that police must obtain a war¬ 
rant to use a cell site simulator, observing that “people have a 
reasonable expectation that their cell phones will not be used 
as real-time tracking devices,” and most other courts to have 
considered the issue have followed in its footsteps — though 
often relying on statutory grounds and avoiding delving into 
the constitutional question. 65 The Florida Supreme Court 
reached a similar decision in 2014, recognizing that people 
have a reasonable expectation of privacy in the location 
information transmitted by their cell phones. 66 The court 
held that the police must get a warrant in order to compel a 
cell phone service provider to provide real-time updates on a 
user’s location. 

Unlike with historical data, courts ruling on real-time 
tracking largely have not distinguished between tracking 
for a short versus a long period of time — perhaps because 
tracking someone in real time is invasive regardless of how 
long it lasts. 67 However, several cases on real-time tracking 
are pending before state supreme courts, 68 and at least one 
appeals court has held that real-time tracking for a brief 
period does not raise constitutional problems. 69 The issue 
may therefore come before the Supreme Court sooner rather 
than later. In the meantime, many states are taking matters 
into their own hands: As of this writing, nine states require a 
warrant for all location information; four states have legisla¬ 
tion prohibiting real-time tracking without a warrant, while 
another two state supreme courts have held that a warrant is 
required for real-time tracking; two states require a warrant 
for a cell site simulator; three states require a court order to 


use a cell site simulator; and five states require court orders to 
obtain location information. 70 

In addition, the Departments of Justice and Homeland 
Security adopted policies in 2013 requiring their compo¬ 
nents to obtain a warrant in order to use a cell site simulator, 
with some limited exceptions. 71 But no federal law codifies 
this requirement, there is no penalty for noncompliance, and 
the Justice Department policy does not bind state or local 
law enforcement agencies that acquire their own cell site 
simulators instead of borrowing them from federal agencies. 72 
A handful of individual states have legislatively restricted law 
enforcement’s use of cell site simulators, suggesting a path 
forward for lawmakers. 73 

THIRD-PARTY DOCTRINE 

Until recently, arguments that CSLI should be protected 
by the Fourth Amendment because the data reveals indi¬ 
viduals’ private information ran into another roadblock: 
the third-party doctrine. This rule, which arose out of cases 
dating back to the late 1970s, decrees that there is no expec¬ 
tation of privacy when information is voluntarily shared with 
a third party, be it a bank, a bookstore, or an auto shop. In 
other words, the doctrine frees police to collect the data from 
a third party without having to serve a warrant or involve the 
individual with the greatest interest in keeping the informa¬ 
tion secret. 74 

In Carpenter , however, the Supreme Court held that the 
third-party doctrine is no longer a bright-line rule when it 
comes to CSLI. The Court reasoned that cell site location in¬ 
formation is sensitive enough that people retain a reasonable 
expectation of privacy in it. 75 The Court also observed that 
having a cell phone is a near-requirement in the 21 st century 
and that transmission of information from a cell phone to 
a tower is a necessary function of cellular technology. As a 
result, sharing this information is not truly “voluntary.” 76 
Thus, except in cases of emergency, police must now obtain a 
warrant to acquire seven days’ or more worth of CSLI from a 
cell phone provider. 77 

DATA RETENTION AND DISCLOSURE 

Questions persist regarding how long police or prosecutors 
retain cell phone location data — particularly of individuals 
who are not the intended targets of the collection — as well 
as whether defendants in criminal cases are notified of its 
existence. When it comes to tower dumps, some agencies ap¬ 
pear to retain non-germane information for long periods of 
time. 78 As for cell site simulators, the DOJ policy requiring 
warrants mandates relatively swift deletion of any irrelevant 
data. And in California, anyone whose digital information 
is targeted may petition for the destruction of any data 
obtained in violation of federal or state law. 79 California state 
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law also requires law enforcement agencies to have a publicly 
available privacy and use policy. However, no other state 
appears to have a similar mandate. 80 

Without proper regulation, these troves of location infor¬ 
mation could be used to identify and track individuals’ past, 
present, and future activities. This is particularly concerning 
in the context of protests or other political gatherings, or 
other expressions of First Amendment-protected activity. The 
retention of such information could chill individuals’ First 
Amendment rights, especially where it is used by law enforce¬ 
ment to identify, target, and prosecute political dissidents 
and their allies. 81 

Finally, secrecy around data acquisition and retention 
deprives defendants of their right to due process. Under 
Brady v. Maryland , prosecutors must disclose evidence that 
is favorable to the defendant or otherwise material to his or 
her defense. 82 Failure to disclose all relevant evidence deprives 
defendants of the opportunity to challenge the quality and 
veracity of the government’s investigation and prevents them 
from building their strongest case. 

Recommendations 

1. Surveillance transparency: Jurisdictions considering 
the procurement and use of cell site simulators and other 
cell phone monitoring or tracking devices should require 
law enforcement to disclose the nature, scope, and privacy 
impact of the surveillance technologies. This should include 
information about any disparate impact of the technology’s 
use on protected classes of individuals such as communities 
of color or other marginalized communities prior to disburs¬ 
ing funds for the technology’s acquisition. Model legislation 
can be found in the cities of Oakland and Berkeley, Califor¬ 
nia, where recently approved ordinances have implemented 
robust disclosure, accountability, and approval mechanisms. 83 
Legislation has also been introduced in New York City that 
would require the New York Police Department to disclose 
information about its use of surveillance technologies. 84 

2. Require community feedback before, during, and after 
procurement: When law enforcement seeks to acquire and 
use surveillance technologies such as cell site simulators, the 
communities affected should be afforded the opportunity to 


review and respond to the stated law enforcement objective 
and to comment on the necessity for the acquisition of such 
tools. There should be opportunities for such input prior to 
the technologies’ procurement, during the selection process 
if approved for acquisition, and after implementation to hold 
law enforcement accountable. 

3. Expand warrant requirements: Federal and state legis¬ 
lation should require a probable cause warrant for the use 
of cell site simulators and for access to real-time cell site in¬ 
formation (with appropriate exceptions for emergencies). In 
2015, California passed a robust state privacy law, CalECPA, 
that could be a model for such efforts. CalECPA provides 
for, among other things, the suppression of any information 
obtained in violation of the Fourth Amendment. 85 A number 
of other states have passed legislation requiring a warrant for 
phone tracking; the included chart provides more details. 

4. Disclose all information in criminal cases: Location data 
collected by cell site simulators should be disclosed to defen¬ 
dants and to the court. The federal government should cease 
the use of nondisclosure agreements and instead facilitate 
“clarity and candor to the court.” 86 

5. Limit Data Retention: Extraneous cell site location 
information not pertaining to the particular phone and user 
targeted should be promptly segregated and destroyed. If an 
investigation requires retention of additional information for 
a legitimate law enforcement purpose, the period should be 
as brief as possible. These limits could be imposed not only 
by departmental policy but also by state and federal law, with 
penalties for failure to comply including the exclusion of data 
that is improperly retained. 87 

6. Content collection: Cell site simulators and similar devices 
should not be used to intercept content of phone calls without 
a wiretapping warrant issued under Title III of the Omnibus 
Crime Control and Safe Streets Act of 1968. 88 This so-called 
“superwarrant” requires, among other things, that the agent 
requesting it certify that all other investigative techniques 
have been exhausted (or that it is overly dangerous to do so). 
This ensures an added level of protection against government 
surveillance of the content of private conversations. 89 
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HOW CAN THE GOVERNMENT FIND OR TRACK PEOPLE 
THROUGH THEIR PHONES? 


Types of location data 

How is it produced and stored? 

How can law enforcement access this data? 

Cell site location infor¬ 
mation (CSLI), stored by 
service providers 

A phone accesses its network 
through signals transmitted 
by cell towers and continu¬ 
ally connects to a cell tower 
as a user moves through the 
network. Upon connection to a 
cell tower, the phone transmits 
identifying information to the 
service provider. 

Archived CSLI: 

■ Less than seven days: Law enforcement 
agents must obtain a court order under the 
Stored Communications Act (SCA), which 
requires the government to provide only “spe¬ 
cific and articulable facts showing that there 
are reasonable grounds to believe ... [the re¬ 
cords] are relevant and material to an ongoing 
criminal investigation." 18 U.S.C. § 2703(d). 

■ Seven days or more: In 2018, the Supreme 

Court ruled that police must obtain a search 
warrant supported by probable cause (U.S. 

v. Carpenter), a higher standard than an SCA 
court order. 

■ Tower dumps (information about all cell 
phones in the vicinity of an individual tower 
during a specified time period): Courts are 
split on whether a warrant is required or if 

a court order under the SCA is sufficient. 

While some courts have been satisfied with 
a court order because they concluded there 
was no reasonable expectation of privacy in 
voluntarily shared data, U.S. v. Carpenter may 
alter this analysis going forward. 

Real-time CSLI: 

■ Most courts have held that police must get a 
probable cause warrant to demand real-time 
information from a service provider, though 
some have permitted the police to use a court 
order under the SCA. In addition, four states 
have passed laws requiring police to get a 
search warrant to track a cell phone in real 
time, while another nine require police to get a 
warrant to obtain any location information. 

Cell site simulator 
("Stingray") 

Cell site simulators trick nearby 
cell phones into connecting to 
the device rather than to func¬ 
tioning cell towers, gathering 
real-time geolocation data of all 
cell phones within range. 

A Maryland appeals court has held that police 
must obtain a warrant to use a cell site simula¬ 
tor. The Supreme Court has not yet addressed 
the issue. Three states - California, Connecticut, 
and Washington - have passed laws requiring 
a court order to use a cell site simulator, and 

Illinois and Vermont have passed legislation 
requiring a warrant. 
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HOW CAN THE GOVERNMENT FIND OR TRACK PEOPLE 
THROUGH THEIR PHONES? (continued) 


Types of location data 

How is it produced and stored? 

How can law enforcement access this data? 

Smartphone location 
data stored on the phone 
itself 

Wi-Fi, Bluetooth, and GPS data 
can establish a phone's location 
as well, with more precision 
than CSLI. Smartphones store 
this data until the user takes 
affirmative steps to clear the 
data. 

Law enforcement officers can request this infor¬ 
mation from companies like Google and Apple 
through subpoenas, court orders, or search 
warrants. 

Geolocation data 
produced by third-party 
applications, such as 
Facebook and Google 
Maps. 

Third-party applications that 
use location data as part of 
their services, such as mapping 
applications or fitness trackers, 
store users' location data and 
transmit it back to the applica¬ 
tion's servers, where it is stored 
until the user takes steps to 
clear the data. 

Law enforcement officers can request this 
information via court orders to the third-party 
application developers, such as Facebook and 
Google. Facebook, for instance, requires a court 
order under the Stored Communications Act. 
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